Re: Acquire Storage
LE does that. It uses CICS storage. On Wed, 3 Mar 2021 21:38:39 -0500 Brian Chapman wrote: :>As a CICS SysProg, this makes me cringe. I would highly recommend rewriting :>your program to conform to CICS standards, and use CICS to acquire the :>storage for you. Take a look at the CICS prolog and epilog macros with the :>DFHEISTG macro. These macros make this super simple and I would wager that :>it wouldn't require much effort to rewrite your program with these macros. :> :>Most importantly (like others have said), don't issue MVS SVC's while :>running on the CICS QR TCB. You still cause the TCB to be delayed and :>possibly cause the region to be inoperable. :> :>On Wed, Mar 3, 2021, 6:40 PM Farley, Peter x23353 < :>031df298a9da-dmarc-requ...@listserv.ua.edu> wrote: :> :>> +1 to Binyamin's answer. I have several assembler called subroutines that :>> run in either CICS or batch but they are all LE enabled (CEEENTRY / CEETERM :>> macros et. al.). :>> :>> LE is your friend here. CICS automatically accommodates LE storage :>> requests from CICS user storage so operation of the subroutines in CICS or :>> batch is transparent to the subroutine. :>> :>> If they are really small assembler routines that can use the caller's RSA :>> to save a few regs and use the rest for dynamic storage then you need no :>> getmain or freemain at all. If the subroutines are more complex and need :>> full register save and restore then please seriously consider using LE :>> services. :>> :>> If your callers are all COBOL (or other HLL) then you can (usually) safely :>> assume you are already in an initialized LE environment. :>> :>> Performing OS getmain and freemain when you are running under CICS is :>> fraught with danger and complexity, as Esme points out in her reply. Don't :>> do it unless you really, really, really need to, and if you still have to :>> do it then you had better follow all the CICS rules extremely carefully. :>> :>> Peter :>> :>> -Original Message- :>> From: IBM Mainframe Discussion List On Behalf :>> Of Binyamin Dissen :>> Sent: Wednesday, March 3, 2021 5:09 PM :>> To: IBM-MAIN@LISTSERV.UA.EDU :>> Subject: Re: Acquire Storage :>> :>> I would recommend going to LE and let it take care of things. :>> :>> You must consider whether you are using storage protection in which case :>> you are running in key9. :>> :>> On Wed, 3 Mar 2021 21:30:04 + "Savor, Thomas" :>> <0330b7631be3-dmarc-requ...@listserv.ua.edu> wrote: :>> :>> :>Ok, got a question for you CICS Assembler folks. :>> :> :>> :>I have a CICS Assembler program that works fineits Re-Entrant of :>> course. :>> :>Now I also have some Assembler Sub-programs that can run in Batch. :>> :>And I want to add them to my Online Program. :>> :>But...in order to be able to execute in Online it needs to also be :>> re-entrantwhich is fine for Batch, but Online not so much :>> :>Now in the sub-program, im executing a STORAGE OBTAIN for the Register :>> SAVEAREA. :>> :>But as soon as I try and store the first Register in this acquired :>> storage area, Protection Exception - Abend (I think it was a S0C4) :>> :>Anyway, Is there a sub pool to properly acquire storage that makes Batch :>> and Online Happy or is GETMAIN better or what is the proper way to acquire :>> storage in both Worlds ?? :>> :>> -- :>> :>> This message and any attachments are intended only for the use of the :>> addressee and may contain information that is privileged and confidential. :>> If the reader of the message is not the intended recipient or an authorized :>> representative of the intended recipient, you are hereby notified that any :>> dissemination of this communication is strictly prohibited. If you have :>> received this communication in error, please notify us immediately by :>> e-mail and delete the message and any attachments from your system. :>> :>> -- :>> For IBM-MAIN subscribe / signoff / archive access instructions, :>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN :>> :> :>-- :>For IBM-MAIN subscribe / signoff / archive access instructions, :>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Binyamin Dissen http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
EMC DLM over IBM VTL
Hello We are analysing if EMC DLM would be a right fit to replace IBM VTL. I am trying to understand about backup cycles using EMC DLM when we use single backup solution and single virtual tape library to backup both mainframe and open systems. Is there a possibility for contention ? Will there be a impact to mainframe backup when there is a high backup volume for open system ? These performance do effect the open system as well ? Trying to understand these from the DLM users ? Any feedback would be appreciated Jake. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Serverpac installs January 2022 and beyond
If I understand zosmf is going to connect to IBM site over the internet to download it's software.What if a mainframe data centre which doesn't connect to internet or have restrictions ? On Thu, 4 Mar, 2021, 6:48 am Ed Jaffe, wrote: > On 3/3/2021 2:54 PM, Radoslaw Skorupka wrote: > > I hate it! > > IMHO there should be "vacation legis" - a period of coexistence of two > > methods. Yes, there is some period, but it should be definitely longer. > > When I first heard about this, there was no overlap period at all. There > must have been significant customer push-back because IBM introduced a > short overlap period for early z/OS 2.5 adopters. If you download your > ServerPac between GA and the end of the year, you can use the old > method. So, if that's what you want to do, be prepared to download z/OS > 2.5 right away. Don't dawdle! > > > -- > Phoenix Software International > Edward E. Jaffe > 831 Parkview Drive North > El Segundo, CA 90245 > https://www.phoenixsoftware.com/ > > > > > This e-mail message, including any attachments, appended messages and the > information contained therein, is for the sole use of the intended > recipient(s). If you are not an intended recipient or have otherwise > received this email message in error, any use, dissemination, distribution, > review, storage or copying of this e-mail message and the information > contained therein is strictly prohibited. If you are not an intended > recipient, please contact the sender by reply e-mail and destroy all copies > of this email message and do not otherwise utilize or retain this email > message or any or all of the information contained therein. Although this > email message and any attachments or appended messages are believed to be > free of any virus or other defect that might affect any computer system > into > which it is received and opened, it is the responsibility of the recipient > to ensure that it is virus free and no responsibility is accepted by the > sender for any loss or damage arising in any way from its opening or use. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Serverpac installs January 2022 and beyond
On 3/3/2021 2:54 PM, Radoslaw Skorupka wrote: I hate it! IMHO there should be "vacation legis" - a period of coexistence of two methods. Yes, there is some period, but it should be definitely longer. When I first heard about this, there was no overlap period at all. There must have been significant customer push-back because IBM introduced a short overlap period for early z/OS 2.5 adopters. If you download your ServerPac between GA and the end of the year, you can use the old method. So, if that's what you want to do, be prepared to download z/OS 2.5 right away. Don't dawdle! -- Phoenix Software International Edward E. Jaffe 831 Parkview Drive North El Segundo, CA 90245 https://www.phoenixsoftware.com/ This e-mail message, including any attachments, appended messages and the information contained therein, is for the sole use of the intended recipient(s). If you are not an intended recipient or have otherwise received this email message in error, any use, dissemination, distribution, review, storage or copying of this e-mail message and the information contained therein is strictly prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of this email message and do not otherwise utilize or retain this email message or any or all of the information contained therein. Although this email message and any attachments or appended messages are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by the sender for any loss or damage arising in any way from its opening or use. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
As a CICS SysProg, this makes me cringe. I would highly recommend rewriting your program to conform to CICS standards, and use CICS to acquire the storage for you. Take a look at the CICS prolog and epilog macros with the DFHEISTG macro. These macros make this super simple and I would wager that it wouldn't require much effort to rewrite your program with these macros. Most importantly (like others have said), don't issue MVS SVC's while running on the CICS QR TCB. You still cause the TCB to be delayed and possibly cause the region to be inoperable. On Wed, Mar 3, 2021, 6:40 PM Farley, Peter x23353 < 031df298a9da-dmarc-requ...@listserv.ua.edu> wrote: > +1 to Binyamin's answer. I have several assembler called subroutines that > run in either CICS or batch but they are all LE enabled (CEEENTRY / CEETERM > macros et. al.). > > LE is your friend here. CICS automatically accommodates LE storage > requests from CICS user storage so operation of the subroutines in CICS or > batch is transparent to the subroutine. > > If they are really small assembler routines that can use the caller's RSA > to save a few regs and use the rest for dynamic storage then you need no > getmain or freemain at all. If the subroutines are more complex and need > full register save and restore then please seriously consider using LE > services. > > If your callers are all COBOL (or other HLL) then you can (usually) safely > assume you are already in an initialized LE environment. > > Performing OS getmain and freemain when you are running under CICS is > fraught with danger and complexity, as Esme points out in her reply. Don't > do it unless you really, really, really need to, and if you still have to > do it then you had better follow all the CICS rules extremely carefully. > > Peter > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Binyamin Dissen > Sent: Wednesday, March 3, 2021 5:09 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Acquire Storage > > I would recommend going to LE and let it take care of things. > > You must consider whether you are using storage protection in which case > you are running in key9. > > On Wed, 3 Mar 2021 21:30:04 + "Savor, Thomas" > <0330b7631be3-dmarc-requ...@listserv.ua.edu> wrote: > > :>Ok, got a question for you CICS Assembler folks. > :> > :>I have a CICS Assembler program that works fineits Re-Entrant of > course. > :>Now I also have some Assembler Sub-programs that can run in Batch. > :>And I want to add them to my Online Program. > :>But...in order to be able to execute in Online it needs to also be > re-entrantwhich is fine for Batch, but Online not so much > :>Now in the sub-program, im executing a STORAGE OBTAIN for the Register > SAVEAREA. > :>But as soon as I try and store the first Register in this acquired > storage area, Protection Exception - Abend (I think it was a S0C4) > :>Anyway, Is there a sub pool to properly acquire storage that makes Batch > and Online Happy or is GETMAIN better or what is the proper way to acquire > storage in both Worlds ?? > > -- > > This message and any attachments are intended only for the use of the > addressee and may contain information that is privileged and confidential. > If the reader of the message is not the intended recipient or an authorized > representative of the intended recipient, you are hereby notified that any > dissemination of this communication is strictly prohibited. If you have > received this communication in error, please notify us immediately by > e-mail and delete the message and any attachments from your system. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
I was hoping for Radoslaw Skorupka V2R5. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Radoslaw Skorupka Sent: Wednesday, March 3, 2021 2:51 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z/OS v2r5 - Cert fingerprint Typo! *IT* was announced. -- Radoslaw Skorupka (looking for new job) Lodz, Poland W dniu 03.03.2021 o 18:29, Charles Mills pisze: > And here I was, busy coding. > > Charles > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Radoslaw Skorupka > Sent: Wednesday, March 3, 2021 8:33 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: z/OS v2r5 - Cert fingerprint > > I was announced. > https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html&request_locale=en > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
+1 to Binyamin's answer. I have several assembler called subroutines that run in either CICS or batch but they are all LE enabled (CEEENTRY / CEETERM macros et. al.). LE is your friend here. CICS automatically accommodates LE storage requests from CICS user storage so operation of the subroutines in CICS or batch is transparent to the subroutine. If they are really small assembler routines that can use the caller's RSA to save a few regs and use the rest for dynamic storage then you need no getmain or freemain at all. If the subroutines are more complex and need full register save and restore then please seriously consider using LE services. If your callers are all COBOL (or other HLL) then you can (usually) safely assume you are already in an initialized LE environment. Performing OS getmain and freemain when you are running under CICS is fraught with danger and complexity, as Esme points out in her reply. Don't do it unless you really, really, really need to, and if you still have to do it then you had better follow all the CICS rules extremely carefully. Peter -Original Message- From: IBM Mainframe Discussion List On Behalf Of Binyamin Dissen Sent: Wednesday, March 3, 2021 5:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Acquire Storage I would recommend going to LE and let it take care of things. You must consider whether you are using storage protection in which case you are running in key9. On Wed, 3 Mar 2021 21:30:04 + "Savor, Thomas" <0330b7631be3-dmarc-requ...@listserv.ua.edu> wrote: :>Ok, got a question for you CICS Assembler folks. :> :>I have a CICS Assembler program that works fineits Re-Entrant of course. :>Now I also have some Assembler Sub-programs that can run in Batch. :>And I want to add them to my Online Program. :>But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much :>Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. :>But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) :>Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? -- This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
. As many have already pointed out this is not a Trival effort. And as I have worked on several of these solutions let my add my two cents. . To issue MVS Services within CICS You MUST be running on a Thread Safe Open TCB (I think its an L8 TCB), YOU MUST NOT BE running under the QR TCB. BUT !! You don't know which TCB You are running under : . So You should carefully architect a Task Related User Exit (TRUE) When the application CALLS the TRUE, YOU WILL BE RUNNING under a Thread Safe TCB. . You should also use a Vector table to point you to the correct module with the TASK Related USER EXIT. Th eVector Table is also good when adding additional non CICS modules. I have worked on such efforts in the Past, IT IS NOT TRIVAL and you need to architect this solution carefully. . Paul . -- Original Message -- From: "esst...@juno.com" To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Acquire Storage Date: Wed, 3 Mar 2021 23:15:16 GMT -- Original Message -- From: "Savor, Thomas" <0330b7631be3-dmarc-requ...@listserv.ua.edu> To: IBM-MAIN@LISTSERV.UA.EDU Subject: Acquire Storage Date: Wed, 3 Mar 2021 21:30:04 + Ok, got a question for you CICS Assembler folks. I have a CICS Assembler program that works fineits Re-Entrant of course. Now I also have some Assembler Sub-programs that can run in Batch. And I want to add them to my Online Program. But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? Sorry for the dump question but I cant find anything on this. Thanks, Tom The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
-- Original Message -- From: "Savor, Thomas" <0330b7631be3-dmarc-requ...@listserv.ua.edu> To: IBM-MAIN@LISTSERV.UA.EDU Subject: Acquire Storage Date: Wed, 3 Mar 2021 21:30:04 + Ok, got a question for you CICS Assembler folks. I have a CICS Assembler program that works fineits Re-Entrant of course. Now I also have some Assembler Sub-programs that can run in Batch. And I want to add them to my Online Program. But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? Sorry for the dump question but I cant find anything on this. Thanks, Tom The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Serverpac installs January 2022 and beyond
I hate it! IMHO there should be "vacation legis" - a period of coexistence of two methods. Yes, there is some period, but it should be definitely longer. -- Radoslaw Skorupka (looking for new job) Lodz, Poland W dniu 03.03.2021 o 20:33, Dave Jousma pisze: Well, it was foreshadowed here on IBM-Main not too long ago, probably by Marna. Now its in writing…. Get your z/OSMF instances functional now! After January 2022 orders using the custompac dialogs will be gone! https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html&request_locale=en Availability of the z/OS ServerPac as a portable software instance and the removal of CustomPac dialog support IBM intends to provide z/OS V2.5 as a portable software instance. With this change, IBM plans to discontinue support for the CustomPac dialog method of installation for all IBM software products in Shopz in January 2022. Clients should prepare their driving system with z/OSMF now to accommodate this strategic direction and ensure that Shopz-orderable software can be installed in the future. With an installation strategy that was developed in collaboration with leading industry software vendors, IBM continues to make great strides in delivering z/OS software. Today, CICS®, IMS, Db2, and the related licensed programs can be ordered as a ServerPac in a portable software instance format, installable with z/OSMF Software Management. Building on that momentum, IBM intends to provide z/OS V2.5 in a portable software instance format. To ensure that clients can install Shopz-orderable software in the future, it is recommended that clients take steps to prepare their driving system for z/OSMF-based installations. For an overview of ServerPac with z/OSMF Software Management and the steps to follow, see the ServerPac Installation using z/OSMF content solution website. Here, clients can find a sample portable software instance that can be used to verify that their z/OS driving system is operational for installing a CICS, IMS, Db2, or z/OS ServerPac. Care is advised when clients plan to install z/OS V2.5, because the delivery choices are expected to change in Shopz in January 2022. At the general availability of z/OS V2.5, except for z/OS V2.4, and prior to January 2022, IBM intends to make all IBM z/OS software on Shopz orderable as a ServerPac, and installable as a portable software instance or by using the CustomPac dialog. It is not intended that z/OS V2.4 ServerPac will be offered as a portable software instance. Prior to January 2022, all other software (CICS, IMS, Db2, z/OS V2.5, and licensed programs) are planned to be offered as ServerPac orders deliverable through z/OSMF or the CustomPac dialog. In January 2022, the CustomPac dialog delivery option is planned to be removed for all software, including CICS, IMS, Db2, z/OS V2.5, and all licensed programs. Thereafter, it is planned that all software that is orderable as a ServerPac must be installed with z/OSMF Software Management. Although it is planned that z/OSMF will become a driving system requirement, it would be a requirement only for the system in a client's enterprise from which software installation activities are performed. However, clients might find that using z/OSMF throughout their enterprise offers tremendous benefits. If clients cannot meet the z/OSMF driving system requirements for ServerPac, the Customized Offerings Driver (5751-COD) is available on Shopz. It provides a z/OS system with z/OSMF, which will be activated at z/OS V2.5 availability. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
Typo! *IT* was announced. -- Radoslaw Skorupka (looking for new job) Lodz, Poland W dniu 03.03.2021 o 18:29, Charles Mills pisze: And here I was, busy coding. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Radoslaw Skorupka Sent: Wednesday, March 3, 2021 8:33 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z/OS v2r5 - Cert fingerprint I was announced. https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html&request_locale=en -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
If ACF2 doesn't start UADS usage becomes the norm for logging into TSO. The MVS or Z/OS, has a definition to allocate UADS. Trying to recall where the allocation for it is sine it has been a while, but I believe it is in the Master JCL which in z/OS it is in Parmlib. From there it finds it in the Master Catalog. In the case of ACF2 failing a valid set of JCL and a USERID should be present. Scott On Wednesday, March 3, 2021, 5:04:56 PM EST, Edgington, Jerry wrote: If ACF2 doesn't start, z/OS will default to the SAF interface, and WTOR for access. -Original Message- From: IBM Mainframe Discussion List On Behalf Of John Lock Sent: Wednesday, March 3, 2021 5:00 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Where UADS dataset name goes in case of ACF2? This message was sent from an external source outside of Western & Southern's network. Do not click links or open attachments unless you recognize the sender and know the contents are safe. Itschak, Your post piqued my interest, but it’s around 35 years since I was actually involved in RACF, ACF2, TSS and some other non-starters. I can’t really help further. Sorry! On Wed, Mar 3, 2021 at 15:23 Itschak Mugzach < 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > John, > > I read the doc. It describes ACF2 coverage for UADS functionality. But > what happens if ACF2 refuses to start? In RACF, the UADS dataset is > saved in RCVTUADS. I looked at ACCVT mapping macro and there is no such field. > > ITschak > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > Platform* *|* *Information Security Continuous Monitoring for Z/OS, > zLinux and IBM I **| * > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 > **|* > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > On Wed, Mar 3, 2021 at 8:47 PM John Lock wrote: > > > Some ancient info here ... > > > > > http://vtda.org/docs/computing/IBM/Mainframe/MainframeSecurity/198501_ > Access%20Control%20Facility%20General%20Information%20Manual.pdf > > > > > > On Wed, Mar 3, 2021 at 13:40 Itschak Mugzach < > > 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > > > > > UADS is in a bypass state. However, I still wonder what happens if > > > ACF2 fails to start and we need to authenticate with UADS. Where > > > is the UADS dataset name saved? I don't think we can access the > > > MSTRJCL data area > (I > > > don;r think it is documented anywhere). > > > > > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** > > > IronSphere > > > Platform* *|* *Information Security Continuous Monitoring for > > > Z/OS, > > zLinux > > > and IBM I **| * > > > > > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 > > > 986404 > > **|* > > > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > > > > > > > > > > > > > On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll < > > > jn.ls.mfrm...@letterboxes.org> > > > wrote: > > > > > > > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > > > > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. > > How > > > > can > > > > > I locate the active UADS in this case? > > > > > > > > What would a UADS be used for on such a system? > > > > > > > > Wouldn't everything user-related be under ACF2 control? > > > > > > > > -- > > > > Jeremy Nicoll - my opinions are my own. > > > > > > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > send email to lists...@listserv.ua.edu with the message: INFO > IBM-MAIN > > > > > > > > > > -- > > > For IBM-MAIN subscribe / signoff / archive access > > > instructions, send email to lists...@listserv.ua.edu with the > > > message: INFO IBM-MAIN > > > > > > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO > > IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN sub
Re: EXTERNAL: Re: Acquire Storage
Im running in USER keyits an application program Programs are AMODE(31) RMODE(ANY) Thanks, Tom -Original Message- From: IBM Mainframe Discussion List On Behalf Of Binyamin Dissen Sent: Wednesday, March 3, 2021 5:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: EXTERNAL: Re: Acquire Storage CAUTION: This email originated from outside of the company. Do not click links or open attachments unless you recognize the sender and know the content is safe. I would recommend going to LE and let it take care of things. You must consider whether you are using storage protection in which case you are running in key9. On Wed, 3 Mar 2021 21:30:04 + "Savor, Thomas" <0330b7631be3-dmarc-requ...@listserv.ua.edu> wrote: :>Ok, got a question for you CICS Assembler folks. :> :>I have a CICS Assembler program that works fineits Re-Entrant of course. :>Now I also have some Assembler Sub-programs that can run in Batch. :>And I want to add them to my Online Program. :>But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much :>Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. :>But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) :>Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? -- Binyamin Dissen https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.dissensoftware.com%2F&data=04%7C01%7Cthomas.savor%40fisglobal.com%7C6edf0bb93c464188180208d8de911a22%7Ce3ff91d834c84b15a0b418910a6ac575%7C0%7C0%7C637504062097170113%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=W8ebJHKQse3khlFN8oclFKtA22IuHsQ1c%2BxPGRPJpEs%3D&reserved=0 Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
I would recommend going to LE and let it take care of things. You must consider whether you are using storage protection in which case you are running in key9. On Wed, 3 Mar 2021 21:30:04 + "Savor, Thomas" <0330b7631be3-dmarc-requ...@listserv.ua.edu> wrote: :>Ok, got a question for you CICS Assembler folks. :> :>I have a CICS Assembler program that works fineits Re-Entrant of course. :>Now I also have some Assembler Sub-programs that can run in Batch. :>And I want to add them to my Online Program. :>But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much :>Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. :>But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) :>Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? -- Binyamin Dissen http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
If ACF2 doesn't start, z/OS will default to the SAF interface, and WTOR for access. -Original Message- From: IBM Mainframe Discussion List On Behalf Of John Lock Sent: Wednesday, March 3, 2021 5:00 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Where UADS dataset name goes in case of ACF2? This message was sent from an external source outside of Western & Southern's network. Do not click links or open attachments unless you recognize the sender and know the contents are safe. Itschak, Your post piqued my interest, but it’s around 35 years since I was actually involved in RACF, ACF2, TSS and some other non-starters. I can’t really help further. Sorry! On Wed, Mar 3, 2021 at 15:23 Itschak Mugzach < 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > John, > > I read the doc. It describes ACF2 coverage for UADS functionality. But > what happens if ACF2 refuses to start? In RACF, the UADS dataset is > saved in RCVTUADS. I looked at ACCVT mapping macro and there is no such field. > > ITschak > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > Platform* *|* *Information Security Continuous Monitoring for Z/OS, > zLinux and IBM I **| * > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 > **|* > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > On Wed, Mar 3, 2021 at 8:47 PM John Lock wrote: > > > Some ancient info here ... > > > > > http://vtda.org/docs/computing/IBM/Mainframe/MainframeSecurity/198501_ > Access%20Control%20Facility%20General%20Information%20Manual.pdf > > > > > > On Wed, Mar 3, 2021 at 13:40 Itschak Mugzach < > > 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > > > > > UADS is in a bypass state. However, I still wonder what happens if > > > ACF2 fails to start and we need to authenticate with UADS. Where > > > is the UADS dataset name saved? I don't think we can access the > > > MSTRJCL data area > (I > > > don;r think it is documented anywhere). > > > > > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** > > > IronSphere > > > Platform* *|* *Information Security Continuous Monitoring for > > > Z/OS, > > zLinux > > > and IBM I **| * > > > > > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 > > > 986404 > > **|* > > > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > > > > > > > > > > > > > On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll < > > > jn.ls.mfrm...@letterboxes.org> > > > wrote: > > > > > > > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > > > > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. > > How > > > > can > > > > > I locate the active UADS in this case? > > > > > > > > What would a UADS be used for on such a system? > > > > > > > > Wouldn't everything user-related be under ACF2 control? > > > > > > > > -- > > > > Jeremy Nicoll - my opinions are my own. > > > > > > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > send email to lists...@listserv.ua.edu with the message: INFO > IBM-MAIN > > > > > > > > > > -- > > > For IBM-MAIN subscribe / signoff / archive access > > > instructions, send email to lists...@listserv.ua.edu with the > > > message: INFO IBM-MAIN > > > > > > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO > > IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
Itschak, Your post piqued my interest, but it’s around 35 years since I was actually involved in RACF, ACF2, TSS and some other non-starters. I can’t really help further. Sorry! On Wed, Mar 3, 2021 at 15:23 Itschak Mugzach < 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > John, > > I read the doc. It describes ACF2 coverage for UADS functionality. But what > happens if ACF2 refuses to start? In RACF, the UADS dataset is saved in > RCVTUADS. I looked at ACCVT mapping macro and there is no such field. > > ITschak > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux > and IBM I **| * > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > On Wed, Mar 3, 2021 at 8:47 PM John Lock wrote: > > > Some ancient info here ... > > > > > http://vtda.org/docs/computing/IBM/Mainframe/MainframeSecurity/198501_Access%20Control%20Facility%20General%20Information%20Manual.pdf > > > > > > On Wed, Mar 3, 2021 at 13:40 Itschak Mugzach < > > 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > > > > > UADS is in a bypass state. However, I still wonder what happens if ACF2 > > > fails to start and we need to authenticate with UADS. Where is the UADS > > > dataset name saved? I don't think we can access the MSTRJCL data area > (I > > > don;r think it is documented anywhere). > > > > > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > > > Platform* *|* *Information Security Continuous Monitoring for Z/OS, > > zLinux > > > and IBM I **| * > > > > > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 > > **|* > > > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > > > > > > > > > > > > > On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll < > > > jn.ls.mfrm...@letterboxes.org> > > > wrote: > > > > > > > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > > > > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. > > How > > > > can > > > > > I locate the active UADS in this case? > > > > > > > > What would a UADS be used for on such a system? > > > > > > > > Wouldn't everything user-related be under ACF2 control? > > > > > > > > -- > > > > Jeremy Nicoll - my opinions are my own. > > > > > > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > send email to lists...@listserv.ua.edu with the message: INFO > IBM-MAIN > > > > > > > > > > -- > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
You might want to read up on CICS storage protection and transaction isolation, see https://www.ibm.com/support/knowledgecenter/SSGMCP_5.5.0/applications/designing/dfhp34g.html On Thu, Mar 4, 2021 at 8:30 AM Savor, Thomas < 0330b7631be3-dmarc-requ...@listserv.ua.edu> wrote: > Ok, got a question for you CICS Assembler folks. > > I have a CICS Assembler program that works fineits Re-Entrant of > course. > Now I also have some Assembler Sub-programs that can run in Batch. > And I want to add them to my Online Program. > But...in order to be able to execute in Online it needs to also be > re-entrantwhich is fine for Batch, but Online not so much > Now in the sub-program, im executing a STORAGE OBTAIN for the Register > SAVEAREA. > But as soon as I try and store the first Register in this acquired storage > area, Protection Exception - Abend (I think it was a S0C4) > Anyway, Is there a sub pool to properly acquire storage that makes Batch > and Online Happy or is GETMAIN better or what is the proper way to acquire > storage in both Worlds ?? > > Sorry for the dump question but I cant find anything on this. > > Thanks, > > Tom > The information contained in this message is proprietary and/or > confidential. If you are not the intended recipient, please: (i) delete the > message and all copies; (ii) do not disclose, distribute or use the message > in any manner; and (iii) notify the sender immediately. In addition, please > be aware that any message addressed to our domain is subject to archiving > and review by persons other than the intended recipient. Thank you. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Acquire Storage
Tom, One thing to check is the AMODE and RMODE, of all the programs and where the OBTAIN is getting the vStorage from. Jerry -Original Message- From: IBM Mainframe Discussion List On Behalf Of Savor, Thomas Sent: Wednesday, March 3, 2021 4:30 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Acquire Storage This message was sent from an external source outside of Western & Southern's network. Do not click links or open attachments unless you recognize the sender and know the contents are safe. Ok, got a question for you CICS Assembler folks. I have a CICS Assembler program that works fineits Re-Entrant of course. Now I also have some Assembler Sub-programs that can run in Batch. And I want to add them to my Online Program. But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? Sorry for the dump question but I cant find anything on this. Thanks, Tom The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Acquire Storage
Ok, got a question for you CICS Assembler folks. I have a CICS Assembler program that works fineits Re-Entrant of course. Now I also have some Assembler Sub-programs that can run in Batch. And I want to add them to my Online Program. But...in order to be able to execute in Online it needs to also be re-entrantwhich is fine for Batch, but Online not so much Now in the sub-program, im executing a STORAGE OBTAIN for the Register SAVEAREA. But as soon as I try and store the first Register in this acquired storage area, Protection Exception - Abend (I think it was a S0C4) Anyway, Is there a sub pool to properly acquire storage that makes Batch and Online Happy or is GETMAIN better or what is the proper way to acquire storage in both Worlds ?? Sorry for the dump question but I cant find anything on this. Thanks, Tom The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
The issue here is fallback. Not production run. *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* On Wed, Mar 3, 2021 at 10:29 PM Jeremy Nicoll wrote: > On Wed, 3 Mar 2021, at 20:22, Itschak Mugzach wrote: > > > I read the doc. It describes ACF2 coverage for UADS functionality. But > what > > happens if ACF2 refuses to start? > > Back out whatever you changed since it last worked? > > Even if you can get around the UADS issue, /surely/ you would not run a > real system without ACF2 being active? > > I have some sort of recollection of ACF2 using WTORs to seek decisions > on things, if it's not working - though presumably means some part of it > (hooks?) are active. > > But if ACF2 isn't there to enforce all your security issues, I don't see > how > you can safely run a system at all. How would you protect your datasets > and other resources? > > -- > Jeremy Nicoll - my opinions are my own. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
SYSUADS in MSTJCL** On Wed, 3 Mar 2021 20:39:54 +0200 Itschak Mugzach <0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: :>UADS is in a bypass state. However, I still wonder what happens if ACF2 :>fails to start and we need to authenticate with UADS. Where is the UADS :>dataset name saved? I don't think we can access the MSTRJCL data area (I :>don;r think it is documented anywhere). :> :>*| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere :>Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux :>and IBM I **| * :> :>*|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* :>*Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* :> :> :> :> :> :>On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll :>wrote: :> :>> On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: :>> > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How :>> can :>> > I locate the active UADS in this case? :>> :>> What would a UADS be used for on such a system? :>> :>> Wouldn't everything user-related be under ACF2 control? :>> :>> -- :>> Jeremy Nicoll - my opinions are my own. :>> :>> -- :>> For IBM-MAIN subscribe / signoff / archive access instructions, :>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN :>> :> :>-- :>For IBM-MAIN subscribe / signoff / archive access instructions, :>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Binyamin Dissen http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
On Wed, 3 Mar 2021, at 20:22, Itschak Mugzach wrote: > I read the doc. It describes ACF2 coverage for UADS functionality. But what > happens if ACF2 refuses to start? Back out whatever you changed since it last worked? Even if you can get around the UADS issue, /surely/ you would not run a real system without ACF2 being active? I have some sort of recollection of ACF2 using WTORs to seek decisions on things, if it's not working - though presumably means some part of it (hooks?) are active. But if ACF2 isn't there to enforce all your security issues, I don't see how you can safely run a system at all. How would you protect your datasets and other resources? -- Jeremy Nicoll - my opinions are my own. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
John, I read the doc. It describes ACF2 coverage for UADS functionality. But what happens if ACF2 refuses to start? In RACF, the UADS dataset is saved in RCVTUADS. I looked at ACCVT mapping macro and there is no such field. ITschak *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* On Wed, Mar 3, 2021 at 8:47 PM John Lock wrote: > Some ancient info here ... > > http://vtda.org/docs/computing/IBM/Mainframe/MainframeSecurity/198501_Access%20Control%20Facility%20General%20Information%20Manual.pdf > > > On Wed, Mar 3, 2021 at 13:40 Itschak Mugzach < > 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > > > UADS is in a bypass state. However, I still wonder what happens if ACF2 > > fails to start and we need to authenticate with UADS. Where is the UADS > > dataset name saved? I don't think we can access the MSTRJCL data area (I > > don;r think it is documented anywhere). > > > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > > Platform* *|* *Information Security Continuous Monitoring for Z/OS, > zLinux > > and IBM I **| * > > > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 > **|* > > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > > > > > > > On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll < > > jn.ls.mfrm...@letterboxes.org> > > wrote: > > > > > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > > > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. > How > > > can > > > > I locate the active UADS in this case? > > > > > > What would a UADS be used for on such a system? > > > > > > Wouldn't everything user-related be under ACF2 control? > > > > > > -- > > > Jeremy Nicoll - my opinions are my own. > > > > > > -- > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Serverpac installs January 2022 and beyond
Well, it was foreshadowed here on IBM-Main not too long ago, probably by Marna. Now its in writing…. Get your z/OSMF instances functional now! After January 2022 orders using the custompac dialogs will be gone! https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html&request_locale=en Availability of the z/OS ServerPac as a portable software instance and the removal of CustomPac dialog support IBM intends to provide z/OS V2.5 as a portable software instance. With this change, IBM plans to discontinue support for the CustomPac dialog method of installation for all IBM software products in Shopz in January 2022. Clients should prepare their driving system with z/OSMF now to accommodate this strategic direction and ensure that Shopz-orderable software can be installed in the future. With an installation strategy that was developed in collaboration with leading industry software vendors, IBM continues to make great strides in delivering z/OS software. Today, CICS®, IMS, Db2, and the related licensed programs can be ordered as a ServerPac in a portable software instance format, installable with z/OSMF Software Management. Building on that momentum, IBM intends to provide z/OS V2.5 in a portable software instance format. To ensure that clients can install Shopz-orderable software in the future, it is recommended that clients take steps to prepare their driving system for z/OSMF-based installations. For an overview of ServerPac with z/OSMF Software Management and the steps to follow, see the ServerPac Installation using z/OSMF content solution website. Here, clients can find a sample portable software instance that can be used to verify that their z/OS driving system is operational for installing a CICS, IMS, Db2, or z/OS ServerPac. Care is advised when clients plan to install z/OS V2.5, because the delivery choices are expected to change in Shopz in January 2022. At the general availability of z/OS V2.5, except for z/OS V2.4, and prior to January 2022, IBM intends to make all IBM z/OS software on Shopz orderable as a ServerPac, and installable as a portable software instance or by using the CustomPac dialog. It is not intended that z/OS V2.4 ServerPac will be offered as a portable software instance. Prior to January 2022, all other software (CICS, IMS, Db2, z/OS V2.5, and licensed programs) are planned to be offered as ServerPac orders deliverable through z/OSMF or the CustomPac dialog. In January 2022, the CustomPac dialog delivery option is planned to be removed for all software, including CICS, IMS, Db2, z/OS V2.5, and all licensed programs. Thereafter, it is planned that all software that is orderable as a ServerPac must be installed with z/OSMF Software Management. Although it is planned that z/OSMF will become a driving system requirement, it would be a requirement only for the system in a client's enterprise from which software installation activities are performed. However, clients might find that using z/OSMF throughout their enterprise offers tremendous benefits. If clients cannot meet the z/OSMF driving system requirements for ServerPac, the Customized Offerings Driver (5751-COD) is available on Shopz. It provides a z/OS system with z/OSMF, which will be activated at z/OS V2.5 availability. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
I don't know of any way other than looking in the Mater address space. It's not an IKJTSOxx parameter, so the PARMLIB command won't help. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of ITschak Mugzach [imugz...@gmail.com] Sent: Wednesday, March 3, 2021 12:11 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Where UADS dataset name goes in case of ACF2? I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How can I locate the active UADS in this case? ITschak ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM coming soon * -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF desktop
There are videos and other information, just search for previous posts about this subject on the list server: https://listserv.ua.edu/archives/ibm-main.html From: IBM Mainframe Discussion List on behalf of Frank Swarbrick Sent: Wednesday, March 3, 2021 12:12 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: z/OSMF desktop [CAUTION: This Email is from outside the Organization. Unless you trust the sender, Don’t click links or open attachments as it may be a Phishing email, which can steal your Information and compromise your Computer.] Does anyone use this? Is it only useful for system programmers, or might application developers find it of use? Is it in any way related to the Zowe desktop? Are there any videos demonstrating it? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
Sorry. Meant to say “on page 36” On Wed, Mar 3, 2021 at 13:47 John Lock wrote: > Some ancient info here ... > > http://vtda.org/docs/computing/IBM/Mainframe/MainframeSecurity/198501_Access%20Control%20Facility%20General%20Information%20Manual.pdf > > > On Wed, Mar 3, 2021 at 13:40 Itschak Mugzach < > 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > >> UADS is in a bypass state. However, I still wonder what happens if ACF2 >> fails to start and we need to authenticate with UADS. Where is the UADS >> dataset name saved? I don't think we can access the MSTRJCL data area (I >> don;r think it is documented anywhere). >> >> *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere >> Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux >> and IBM I **| * >> >> *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 >> **|* >> *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* >> >> >> >> >> >> On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll < >> jn.ls.mfrm...@letterboxes.org> >> wrote: >> >> > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: >> > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How >> > can >> > > I locate the active UADS in this case? >> > >> > What would a UADS be used for on such a system? >> > >> > Wouldn't everything user-related be under ACF2 control? >> > >> > -- >> > Jeremy Nicoll - my opinions are my own. >> > >> > -- >> > For IBM-MAIN subscribe / signoff / archive access instructions, >> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> > >> >> -- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
Some ancient info here ... http://vtda.org/docs/computing/IBM/Mainframe/MainframeSecurity/198501_Access%20Control%20Facility%20General%20Information%20Manual.pdf On Wed, Mar 3, 2021 at 13:40 Itschak Mugzach < 0305158ad67d-dmarc-requ...@listserv.ua.edu> wrote: > UADS is in a bypass state. However, I still wonder what happens if ACF2 > fails to start and we need to authenticate with UADS. Where is the UADS > dataset name saved? I don't think we can access the MSTRJCL data area (I > don;r think it is documented anywhere). > > *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere > Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux > and IBM I **| * > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll < > jn.ls.mfrm...@letterboxes.org> > wrote: > > > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How > > can > > > I locate the active UADS in this case? > > > > What would a UADS be used for on such a system? > > > > Wouldn't everything user-related be under ACF2 control? > > > > -- > > Jeremy Nicoll - my opinions are my own. > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
UADS is in a bypass state. However, I still wonder what happens if ACF2 fails to start and we need to authenticate with UADS. Where is the UADS dataset name saved? I don't think we can access the MSTRJCL data area (I don;r think it is documented anywhere). *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* On Wed, Mar 3, 2021 at 8:19 PM Jeremy Nicoll wrote: > On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How > can > > I locate the active UADS in this case? > > What would a UADS be used for on such a system? > > Wouldn't everything user-related be under ACF2 control? > > -- > Jeremy Nicoll - my opinions are my own. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Where UADS dataset name goes in case of ACF2?
On Wed, 3 Mar 2021, at 17:11, ITschak Mugzach wrote: > I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How can > I locate the active UADS in this case? What would a UADS be used for on such a system? Wouldn't everything user-related be under ACF2 control? -- Jeremy Nicoll - my opinions are my own. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
z/OSMF desktop
Does anyone use this? Is it only useful for system programmers, or might application developers find it of use? Is it in any way related to the Zowe desktop? Are there any videos demonstrating it? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
And here I was, busy coding. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Radoslaw Skorupka Sent: Wednesday, March 3, 2021 8:33 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z/OS v2r5 - Cert fingerprint I was announced. https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html&request_locale=en -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
On Wed, 3 Mar 2021 17:03:55 +, Seymour J Metz wrote: >Noted, 32760, truncated to a multiple of LRECL, reduces the number of calls. > >PDSE won't reblock if the dataset isn't PDSE. Or are you saying that FORCE >SYSTEM DETERMINED BLOCKSIZE only applies to PDSE? > PDSE was mentioned earlier in this thread, although not in the earliest plies: >___ On Wed, 3 Mar 2021 09:18:12 -0600, Wendell Lovewell wrote: >It's hard to tell exactly what's going on under the covers, but as best I've >been able to deduce in this particular case is: > >1) RECEIVE reads the INMR02 record, sees the original PDSE was blksize 27920 >and allocates it that way, but does not open it. >2) SDB steps in, says "they really want 32720" and changes the (VTOC?) entry >to that. (32720 seems like a really poor choice) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Where UADS dataset name goes in case of ACF2?
I looked at RCVT in an ACF2 system, but the RCVTUADS is nullified. How can I locate the active UADS in this case? ITschak ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM coming soon * -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
Noted, 32760, truncated to a multiple of LRECL, reduces the number of calls. PDSE won't reblock if the dataset isn't PDSE. Or are you saying that FORCE SYSTEM DETERMINED BLOCKSIZE only applies to PDSE? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of Paul Gilmartin [000433f07816-dmarc-requ...@listserv.ua.edu] Sent: Wednesday, March 3, 2021 11:43 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: TSO RECEIVE and System Determined Blksize - New RFE On Wed, 3 Mar 2021 15:58:28 +, Seymour J Metz wrote: >32760 is optimal for load libraries; I don't know of any reason to use it for >PDSE. > 32720 (as below) for FB80 minimizes overhead of calls to READ at the expense of greater REGION. There's no concern of wasted space with PDSE 4Ki pages. 27920 has no advantage for PDSE >I would expect FORCE SYSTEM DETERMINED BLOCKSIZE to break things, and not just >for RECEIVE. Consider old programs with hard wired buffer sizes and other >programs creating output for them. If SDB increases the block sizes for the >creating programs, the reading programs will fail on S001. > PDSE will reblock for the hard wired buffer size. > >From: Wendell Lovewell >Sent: Wednesday, March 3, 2021 10:35 AM >... >Since IEBCOPY is adjusting the blksize, it must be that RECEIVE did the >allocation first and deallocated the empty file. Then SDB says "I can do >better" & changed the blksize. Then when IEBCOPY is called it says "that's >not right, I'll fix it". Makes me wonder if anyone uses SDB. Plus, how is >32720 an "optimal" block size? Optimal for disk sales? :) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
Preview for 2.5 came out yesterday. On Wed, Mar 3, 2021 at 10:31 AM Charles Mills wrote: > I would guess you are not going to get anyone from IBM to admit publicly > that there is such a thing as z/OS V2R5; not until it is announced. > > Charles > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of kekronbekron > Sent: Wednesday, March 3, 2021 6:28 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: z/OS v2r5 - Cert fingerprint > > Recently, there was a question about identifying certs being used in an > environment. > I had suggested looking for the cert fingerprint(s) in the TLS inspection > proxy's logs. > > It looks like z/OS v2r5 is adding cert fingerprints, so I think it means > usage will get recorded to SMF? > Would be great if an IBM-er or someone in the know can clarify. > > - KB > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
On Wed, 3 Mar 2021 15:58:28 +, Seymour J Metz wrote: >32760 is optimal for load libraries; I don't know of any reason to use it for >PDSE. > 32720 (as below) for FB80 minimizes overhead of calls to READ at the expense of greater REGION. There's no concern of wasted space with PDSE 4Ki pages. 27920 has no advantage for PDSE >I would expect FORCE SYSTEM DETERMINED BLOCKSIZE to break things, and not just >for RECEIVE. Consider old programs with hard wired buffer sizes and other >programs creating output for them. If SDB increases the block sizes for the >creating programs, the reading programs will fail on S001. > PDSE will reblock for the hard wired buffer size. > >From: Wendell Lovewell >Sent: Wednesday, March 3, 2021 10:35 AM >... >Since IEBCOPY is adjusting the blksize, it must be that RECEIVE did the >allocation first and deallocated the empty file. Then SDB says "I can do >better" & changed the blksize. Then when IEBCOPY is called it says "that's >not right, I'll fix it". Makes me wonder if anyone uses SDB. Plus, how is >32720 an "optimal" block size? Optimal for disk sales? :) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
I was announced. https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html&request_locale=en -- Radoslaw Skorupka (looking for new job) Lodz, Poland W dniu 03.03.2021 o 17:30, Charles Mills pisze: I would guess you are not going to get anyone from IBM to admit publicly that there is such a thing as z/OS V2R5; not until it is announced. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of kekronbekron Sent: Wednesday, March 3, 2021 6:28 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: z/OS v2r5 - Cert fingerprint Recently, there was a question about identifying certs being used in an environment. I had suggested looking for the cert fingerprint(s) in the TLS inspection proxy's logs. It looks like z/OS v2r5 is adding cert fingerprints, so I think it means usage will get recorded to SMF? Would be great if an IBM-er or someone in the know can clarify. - KB -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
I would guess you are not going to get anyone from IBM to admit publicly that there is such a thing as z/OS V2R5; not until it is announced. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of kekronbekron Sent: Wednesday, March 3, 2021 6:28 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: z/OS v2r5 - Cert fingerprint Recently, there was a question about identifying certs being used in an environment. I had suggested looking for the cert fingerprint(s) in the TLS inspection proxy's logs. It looks like z/OS v2r5 is adding cert fingerprints, so I think it means usage will get recorded to SMF? Would be great if an IBM-er or someone in the know can clarify. - KB -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
32760 is optimal for load libraries; I don't know of any reason to use it for PDSE. I would expect FORCE SYSTEM DETERMINED BLOCKSIZE to break things, and not just for RECEIVE. Consider old programs with hard wired buffer sizes and other programs creating output for them. If SDB increases the block sizes for the creating programs, the reading programs will fail on S001. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of Wendell Lovewell [01e9c0ee0673-dmarc-requ...@listserv.ua.edu] Sent: Wednesday, March 3, 2021 10:35 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: TSO RECEIVE and System Determined Blksize - New RFE Shmuel, I believe that's the way it works for existing files that have been opened and closed, whether SDB=Y or N. SDB comes into play when a file is allocated but not written to by the allocating program. This is from the ISMF help for the SDB setting: Use the FORCE SYSTEM DETERMINED BLOCKSIZE (SDB) field to specify that the system ignore a user-specified block size if no program opens the new data set for writing while it still is allocated. This prevents the user from overriding a system-determined block size. Possible values: Y If no program opens the data set for writing while the new data set still is allocated, then the system will discard a BLKSIZE value coded by the user. The system will attempt to calculate an optimal block size. If a program opens the data set for output while it still is allocated, then the user-specified BLKSIZE will take effect and override a system-determined block size. N If the user specifies a BLKSIZE value, it will take effect and override a system-determined block size. This is the normal way for the system to run. Since IEBCOPY is adjusting the blksize, it must be that RECEIVE did the allocation first and deallocated the empty file. Then SDB says "I can do better" & changed the blksize. Then when IEBCOPY is called it says "that's not right, I'll fix it". Makes me wonder if anyone uses SDB. Plus, how is 32720 an "optimal" block size? Optimal for disk sales? :) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
If RECEIVE sees that the original PDSE was blksize 27920 and allocates the
target that way, then the DSCB will have block size 27920 and SDB should not be
invoked. SDB is not supposed to do anything umless the block size is zero in
all of DCB, JFCB and DSCB. Either they're lying to you or IEBCOPY is doing
OPENJ with "no merge" set. Have you tried escalating?
32720 is a good block size for load libraries. I doubt that it comes from SDB.
Can you run some tests of your own?
Allocate with BLKSIZE=27920.
Open
Close
Examine
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Wendell Lovewell [01e9c0ee0673-dmarc-requ...@listserv.ua.edu]
Sent: Wednesday, March 3, 2021 10:18 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TSO RECEIVE and System Determined Blksize - New RFE
It's hard to tell exactly what's going on under the covers, but as best I've
been able to deduce in this particular case is:
1) RECEIVE reads the INMR02 record, sees the original PDSE was blksize 27920
and allocates it that way, but does not open it.
2) SDB steps in, says "they really want 32720" and changes the (VTOC?) entry to
that. (32720 seems like a really poor choice)
3) IEBCOPY is called, opens the 32720 file, starts reloading the file and
notices that it should be 27920 (not sure how), issues IEB1139W, & RC4
4) RECEIVE sees IEBCOPY's RC4, says 'uh-oh' (technical term), ends with RC12
Why is it not a bug? That's a really good question Shmuel. Imo it is a bug.
I've been going back and forth with IBM to correct it since December. I'm
honestly not sure they ever really understood what was going on, even when the
job was as simple as this:
//TRANRECV JOB CLASS=A
//EXP EXPORT SYMLIST=(*)
//*
// SET INFILE=&SYSUID..TESTLIB
// SET XMIFILE=&SYSUID..TESTLIB.XMIT
// SET OUTFILE=&SYSUID..TESTLIB.NEW
//*
//TRANSMIT EXEC PGM=IKJEFT01,DYNAMNBR=05
//SYSTSPRT DD SYSOUT=*
//INFILE DD DISP=SHR,DSN=&INFILE
//XMIFILE DD DSN=&XMIFILE,DISP=(NEW,PASS),
//DCB=(DSORG=PS),LIKE=&INFILE
//SYSTSIN DD *,SYMBOLS=(JCLONLY)
TRANSMIT,SYS1.&SYSUID.,DDNAME(INFILE), +
OUTDDNAME(XMIFILE)
/*
//*
//RECEIVE EXEC PGM=IKJEFT01,DYNAMNBR=05
//MSGFILE DD SYSOUT=*
//SYSTSPRT DD SYSOUT=*
//XMIT DD DISP=SHR,DSN=&XMIFILE
//SYSTSIN DD *,SYMBOLS=(JCLONLY)
RECEIVE INDDNAME(XMIT),
DA('&OUTFILE')
//
Every week or two IBM support would give me some reason why it couldn't be
done. Once it was "just turn off SDB for that job". Finally they said "It's
not possible, open an RFE.". You can read the whole story here if you want:
https://www.ibm.com/mysupport/s/case/5003p2TsDUDAA3/iebcopy-msg-ieb1139w-incorrectly-generated-when-systemdeterminedblocksize-yes
Or, just vote early, vote often here:
http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=148961
Thanks to those of you who have already voted.
Paul, I believe it's a problem with RECEIVE because RECEIVE is pre-allocating
the file. All it would need to do is open and close the file before calling
IEBCOPY and SDB would stay out of it--SDB doesn't get involved if the program
that allocates the file also opens it. But IEBCOPY could have also noted that
the file was empty when it started and therefore known it was ok to change the
DCB information & not RC=4. (If the file weren't empty, the IEB1139W message
would be warranted.)
Wendell
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
Just for the record, the blocksize for a PDSE is fake. A PDSE always uses 4K physical blocks (unless something changed in the last year or so). So the pretend-blksize has no effect on track utilization. I don't really understand what SDB is doing here either, but it should be smart enough to understand the above. sas On Wed, Mar 3, 2021 at 10:18 AM Wendell Lovewell < 01e9c0ee0673-dmarc-requ...@listserv.ua.edu> wrote: > ... > 2) SDB steps in, says "they really want 32720" and changes the (VTOC?) > entry to that. (32720 seems like a really poor choice) > ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
Shmuel, I believe that's the way it works for existing files that have been opened and closed, whether SDB=Y or N. SDB comes into play when a file is allocated but not written to by the allocating program. This is from the ISMF help for the SDB setting: Use the FORCE SYSTEM DETERMINED BLOCKSIZE (SDB) field to specify that the system ignore a user-specified block size if no program opens the new data set for writing while it still is allocated. This prevents the user from overriding a system-determined block size. Possible values: Y If no program opens the data set for writing while the new data set still is allocated, then the system will discard a BLKSIZE value coded by the user. The system will attempt to calculate an optimal block size. If a program opens the data set for output while it still is allocated, then the user-specified BLKSIZE will take effect and override a system-determined block size. N If the user specifies a BLKSIZE value, it will take effect and override a system-determined block size. This is the normal way for the system to run. Since IEBCOPY is adjusting the blksize, it must be that RECEIVE did the allocation first and deallocated the empty file. Then SDB says "I can do better" & changed the blksize. Then when IEBCOPY is called it says "that's not right, I'll fix it". Makes me wonder if anyone uses SDB. Plus, how is 32720 an "optimal" block size? Optimal for disk sales? :) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TSO RECEIVE and System Determined Blksize - New RFE
It's hard to tell exactly what's going on under the covers, but as best I've
been able to deduce in this particular case is:
1) RECEIVE reads the INMR02 record, sees the original PDSE was blksize 27920
and allocates it that way, but does not open it.
2) SDB steps in, says "they really want 32720" and changes the (VTOC?) entry to
that. (32720 seems like a really poor choice)
3) IEBCOPY is called, opens the 32720 file, starts reloading the file and
notices that it should be 27920 (not sure how), issues IEB1139W, & RC4
4) RECEIVE sees IEBCOPY's RC4, says 'uh-oh' (technical term), ends with RC12
Why is it not a bug? That's a really good question Shmuel. Imo it is a bug.
I've been going back and forth with IBM to correct it since December. I'm
honestly not sure they ever really understood what was going on, even when the
job was as simple as this:
//TRANRECV JOB CLASS=A
//EXP EXPORT SYMLIST=(*)
//*
// SET INFILE=&SYSUID..TESTLIB
// SET XMIFILE=&SYSUID..TESTLIB.XMIT
// SET OUTFILE=&SYSUID..TESTLIB.NEW
//*
//TRANSMIT EXEC PGM=IKJEFT01,DYNAMNBR=05
//SYSTSPRT DD SYSOUT=*
//INFILE DD DISP=SHR,DSN=&INFILE
//XMIFILE DD DSN=&XMIFILE,DISP=(NEW,PASS),
//DCB=(DSORG=PS),LIKE=&INFILE
//SYSTSIN DD *,SYMBOLS=(JCLONLY)
TRANSMIT,SYS1.&SYSUID.,DDNAME(INFILE), +
OUTDDNAME(XMIFILE)
/*
//*
//RECEIVE EXEC PGM=IKJEFT01,DYNAMNBR=05
//MSGFILE DD SYSOUT=*
//SYSTSPRT DD SYSOUT=*
//XMIT DD DISP=SHR,DSN=&XMIFILE
//SYSTSIN DD *,SYMBOLS=(JCLONLY)
RECEIVE INDDNAME(XMIT),
DA('&OUTFILE')
//
Every week or two IBM support would give me some reason why it couldn't be
done. Once it was "just turn off SDB for that job". Finally they said "It's
not possible, open an RFE.". You can read the whole story here if you want:
https://www.ibm.com/mysupport/s/case/5003p2TsDUDAA3/iebcopy-msg-ieb1139w-incorrectly-generated-when-systemdeterminedblocksize-yes
Or, just vote early, vote often here:
http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=148961
Thanks to those of you who have already voted.
Paul, I believe it's a problem with RECEIVE because RECEIVE is pre-allocating
the file. All it would need to do is open and close the file before calling
IEBCOPY and SDB would stay out of it--SDB doesn't get involved if the program
that allocates the file also opens it. But IEBCOPY could have also noted that
the file was empty when it started and therefore known it was ok to change the
DCB information & not RC=4. (If the file weren't empty, the IEB1139W message
would be warranted.)
Wendell
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
z/OS v2r5 - Cert fingerprint
Recently, there was a question about identifying certs being used in an environment. I had suggested looking for the cert fingerprint(s) in the TLS inspection proxy's logs. It looks like z/OS v2r5 is adding cert fingerprints, so I think it means usage will get recorded to SMF? Would be great if an IBM-er or someone in the know can clarify. - KB -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
